[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1748-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1747-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1745-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1743-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1743-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 17, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1740-1] New yaws packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1740-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 14, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1742-1 [email protected] http://www.debian.org/security/ Nico Golde March 16th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1741-1] New psi packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1741-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1740-1] New yaws packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1740-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 14, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites

-------------------------------------------------------------------------- Debian Security Advisory DSA 1727-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 26th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1726-1] New python-crypto packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1726-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1724-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 13th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1715-1] New moin packages fix insufficient input sanitising

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1715 [email protected] http://www.debian.org/security/ Steffen Joeris January 29, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1704 [email protected] http://www.debian.org/security/ Steffen Joeris January 14, 2009 http://www.debian.org/security/faq -...

Debian GNU/Linux XTERM DECRQSS Weakness

Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"' would run bad-command...